Vulnerabilidades do Google Chrome
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Google Chrome: 3829 registro(s), com versões afetadas e correções.cpe:2.3:a:google:chrome
CVE-2026-7911
Alta · 8.3
CWE-416 06/05/2026
Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote...
Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7910
Crítica · 9.6
CWE-416 06/05/2026
Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had...
Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7909
Baixa · 3.1
CWE-693 06/05/2026
Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a...
Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7908
Crítica · 9.6
CWE-416 06/05/2026
Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...
Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7907
Alta · 8.8
CWE-416 06/05/2026
Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7906
Alta · 8.8
CWE-416 06/05/2026
Use after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...
Use after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7905
Alta · 8.3
CWE-20 06/05/2026
Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0...
Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7904
Média · 4.3
CWE-125 06/05/2026
Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...
Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7903
Alta · 8.8
CWE-472 06/05/2026
Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote...
Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7902
Alta · 8.8
CWE-787 06/05/2026
Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote...
Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7901
Alta · 8.8
CWE-416 06/05/2026
Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker...
Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7900
Alta · 8.3
CWE-122 06/05/2026
Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker...
Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7899
Alta · 8.8
CWE-125 06/05/2026
Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote...
Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7898
Alta · 8.8
CWE-416 06/05/2026
Use After Free em Google Chrome
Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)
CVE-2026-7897
Alta · 7.5
CWE-416 06/05/2026
Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker...
Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-7896
Alta · 8.8
CWE-472 06/05/2026
Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...
Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-7363
Alta · 8.8
CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-7361
Alta · 8.8
CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-7360
Baixa · 3.1
CWE-20 28/04/2026
Improper Input Validation em Google Chrome
Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7359
Alta · 8.8
CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7358
Alta · 8.8
CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7357
Alta · 7.5
CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7356
Alta · 8.8
CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-7355
Alta · 8.8
CWE-416 28/04/2026
Use After Free em Google Chrome
Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-7354
Alta · 8.8
CWE-125 28/04/2026
Out-of-bounds Read em Google Chrome
Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)